Spending caps

These templates cap how much an app-owned wallet can send, per transaction or per day. Each one covers a single asset on a single network, so pick the closest match and change the amounts. Daily caps use a fixed window that resets at 00:00 UTC. A transfer counts toward the day’s total once Para signs it, whether or not you broadcast it, and a denied transfer does not count.

Native limits count positive native value: on EVM from any transaction, contract calls included, and on Solana, Cosmos, Stellar and Sui from native transfers. Token limits count ERC-20 transfer calls on EVM, including ERC-20 transfers sent through Para gas sponsorship, and token transfers on Solana, Cosmos and Stellar. Sui has no token limits. Gas and fees never count. Apart from those sponsored transfers, smart account user operations do not count toward EVM limits. A token limit that names an asset counts only that asset. Each network, asset and window has its own budget, so a limit of 1 ETH per day on Ethereum and Base allows 1 ETH per day on each network. Payments a Safe makes count only toward the Safe limits, safe.spend.native and safe.spend.erc20, which keep one budget per Safe. See Metered facts for the full rules.

Cap ETH per transaction and per day

Use this to limit what a compromised or misbehaving backend can move. The policy denies an ETH transfer on Base above 0.1 ETH, and any ETH transfer that would take the day’s total above 1 ETH.

Developer Portal
JSON

On your Development key, open Permissions, select the Guardrails tab, and select Add or New Guardrail.
Enter a Guardrail Policy Name. In Networks, clear Ethereum (1), select Base (8453), and select Continue.
Select Transfer ETH. Select Add Condition, change the condition to Transaction amount, keep is at most and per transaction, and enter 0.1 with the unit set to ETH.
Select Add Action and choose Transfer ETH again. Add a Transaction amount condition: is at most, 1 ETH, per time window, 24 hours.
Select Review, then Save Draft, then Activate on the draft.

guardrail-native-spending-caps.json

{
  "id": "base-native-spending-caps",
  "schemaVersion": "permissions.policy.v1",
  "version": "1",
  "selector": {
    "walletType": "EVM",
    "chainId": "8453"
  },
  "rules": [
    {
      "id": "per-transaction-cap",
      "effect": "deny",
      "actions": ["transfer_native"],
      "when": {
        "kind": "all",
        "of": [
          { "kind": "compare", "fact": "request.classification", "op": "eq", "value": "native_transfer" },
          { "kind": "compare", "fact": "request.value.baseUnits", "op": "gt", "value": "100000000000000000" }
        ]
      }
    },
    {
      "id": "daily-cap",
      "effect": "deny",
      "actions": ["transfer_native"],
      "when": {
        "kind": "all",
        "of": [
          { "kind": "compare", "fact": "request.classification", "op": "eq", "value": "native_transfer" },
          {
            "kind": "aggregate",
            "fact": "wallet.spend.native",
            "op": "gt",
            "value": "1000000000000000000",
            "window": "24h"
          }
        ]
      }
    }
  ],
  "metadata": {
    "productMode": "guardrail",
    "description": "Cap ETH on Base at 0.1 per transaction and 1 per day"
  }
}

In the form you enter the amount the wallet may send, and the saved rule denies anything above it. That is why each condition in the JSON uses gt.

Signing request	Result
Send 0.05 ETH with 0.3 ETH sent today	Signs
Send 0.2 ETH	Denied by `per-transaction-cap`
Send 0.08 ETH with 0.95 ETH sent today	Denied by `daily-cap`

Test it on your Development key: sign a 0.05 ETH transfer, then a 0.2 ETH transfer. The first signs and the second is denied.

The cap counts ETH transfers only. ETH sent along with a contract call is a call_contract request, which this policy does not cover.

Cap USDC per day

Use this when the wallet pays out USDC and other tokens should stay unrestricted. The policy denies a USDC transfer on Base once the day’s total would pass 1,000 USDC. USDC has 6 decimals, so the cap is 1000000000.

Developer Portal
JSON

The form builds a stricter version of this template. It pins the token contract, so the saved Guardrail also denies transfers of every other ERC-20 token on Base, and its JSON leaves out asset.

On your Development key, open Permissions, select the Guardrails tab, and select Add or New Guardrail.
Enter a Guardrail Policy Name. In Networks, clear Ethereum (1), select Base (8453), and select Continue.
Select Transfer tokens and enter 0x833589fcd6edb6e08f4c7c32d4f71b54bda02913 in Contract Address. Function Name is fixed to transfer.
Select Add Condition, change the condition to Transaction amount, choose per time window with 24 hours, keep is at most, and enter 1000000000 token base units.
Select Review, then Save Draft, then Activate on the draft.

guardrail-usdc-daily-cap.json

{
  "id": "base-usdc-daily-cap",
  "schemaVersion": "permissions.policy.v1",
  "version": "1",
  "selector": {
    "walletType": "EVM",
    "chainId": "8453"
  },
  "rules": [
    {
      "id": "usdc-daily-cap",
      "effect": "deny",
      "actions": ["transfer_tokens"],
      "when": {
        "kind": "all",
        "of": [
          { "kind": "compare", "fact": "request.classification", "op": "eq", "value": "erc20_transfer" },
          {
            "kind": "aggregate",
            "fact": "wallet.spend.erc20",
            "op": "gt",
            "value": "1000000000",
            "window": "24h",
            "asset": "0x833589fcd6edb6e08f4c7c32d4f71b54bda02913"
          }
        ]
      }
    }
  ],
  "metadata": {
    "productMode": "guardrail",
    "description": "Cap USDC transfers on Base at 1,000 per day"
  }
}

Signing request	Result
Transfer 400 USDC with 500 USDC sent today	Signs
Transfer 200 USDC with 900 USDC sent today	Denied by `usdc-daily-cap`
Transfer another ERC-20 token	Not limited by this policy

Keep asset when you edit this template. Without it, the rule caps every ERC-20 token at 1000000000 base units a day, each token with its own budget. That is 1,000 USDC, but only a billionth of a token that uses 18 decimals.

Test it on your Development key with a lower cap, such as 1000000 (1 USDC): sign two 0.6 USDC transfers, and the second is denied. Restore the cap before you request a production review.

Cap SOL per day

The same daily cap works on other wallet types. This policy denies a SOL transfer on Solana mainnet once the day’s total would pass 10 SOL, which is 10000000000 lamports.

Developer Portal
JSON

On your Development key, open Permissions, select the Guardrails tab, and select Add or New Guardrail.
Enter a Guardrail Policy Name. In Networks, expand Solana and select Mainnet. Choosing a Solana network clears the EVM selection. Select Continue.
Select Native transfer. Select Add Condition, change the condition to Transaction amount, choose per time window with 24 hours, keep is at most, and enter 10000000000 lamports.
Select Review, then Save Draft, then Activate on the draft.

guardrail-solana-daily-cap.json

{
  "id": "solana-sol-daily-cap",
  "schemaVersion": "permissions.policy.v1",
  "version": "1",
  "selector": {
    "walletType": "SOLANA",
    "chainId": "solana:mainnet"
  },
  "rules": [
    {
      "id": "sol-daily-cap",
      "effect": "deny",
      "actions": ["transfer_native"],
      "when": {
        "kind": "all",
        "of": [
          { "kind": "compare", "fact": "request.actionFamilies", "op": "in", "value": "native_transfer" },
          {
            "kind": "aggregate",
            "fact": "wallet.spend.native",
            "op": "gt",
            "value": "10000000000",
            "window": "24h"
          }
        ]
      }
    }
  ],
  "metadata": {
    "productMode": "guardrail",
    "description": "Cap SOL transfers on Solana at 10 per day"
  }
}

The rule checks request.actionFamilies, which lists every kind of action in the transaction, so the cap also counts a SOL transfer bundled with other instructions.

Signing request	Result
Send 4 SOL with 5 SOL sent today	Signs
Send 2 SOL with 9 SOL sent today	Denied by `sol-daily-cap`

Test it on your Development key with chainId set to solana:devnet and a 1 SOL cap (1000000000): sign two 0.6 SOL transfers, and the second is denied. Restore the mainnet values before you request a production review.

Cap Stellar USDC per day

On Stellar, a token cap names the asset as stellar:<network>:<code>:<issuer>. This policy denies a USDC payment on the Stellar public network once the day’s total would pass 1,000 USDC. Stellar amounts use 7 decimals, so the cap is 10000000000.

Developer Portal
JSON

The form builds a stricter version of this template. It pins the asset in Token Asset, so the saved Guardrail also denies payments of every other Stellar token. It also writes the network as its passphrase instead of stellar:mainnet.

On your Development key, open Permissions, select the Guardrails tab, and select Add or New Guardrail.
Enter a Guardrail Policy Name. In Networks, expand Stellar, select Public, and select Continue.
Select Token transfer and enter stellar:mainnet:USDC:GA5ZSEJYB37JRC5AVCIA5MOP4RHTM335X2KGX3IHOJAPP5RE34K4KZVN in Token Asset.
Select Add Condition, change the condition to Transaction amount, choose per time window with 24 hours, keep is at most, and enter 10000000000 token base units.
Select Review, then Save Draft, then Activate on the draft.

guardrail-stellar-usdc-daily-cap.json

{
  "id": "stellar-usdc-daily-cap",
  "schemaVersion": "permissions.policy.v1",
  "version": "1",
  "selector": {
    "walletType": "STELLAR",
    "chainId": "stellar:mainnet"
  },
  "rules": [
    {
      "id": "stellar-usdc-daily-cap",
      "effect": "deny",
      "actions": ["transfer_tokens"],
      "when": {
        "kind": "all",
        "of": [
          { "kind": "compare", "fact": "request.actionFamilies", "op": "in", "value": "token_transfer" },
          {
            "kind": "aggregate",
            "fact": "wallet.spend.token",
            "op": "gt",
            "value": "10000000000",
            "window": "24h",
            "asset": "stellar:mainnet:USDC:GA5ZSEJYB37JRC5AVCIA5MOP4RHTM335X2KGX3IHOJAPP5RE34K4KZVN"
          }
        ]
      }
    }
  ],
  "metadata": {
    "productMode": "guardrail",
    "description": "Cap USDC transfers on Stellar at 1,000 per day"
  }
}

Signing request	Result
Pay 400 USDC with 500 USDC paid today	Signs
Pay 200 USDC with 900 USDC paid today	Denied by `stellar-usdc-daily-cap`
Pay XLM or another Stellar asset	Not limited by this policy

Test it on your Development key on stellar:testnet: change chainId, and change asset to stellar:testnet:USDC: followed by the testnet issuer. Lower the cap, then sign payments that pass it.

Publish your caps

Once each cap holds on beta, request a production review from your Production key. Para applies the same caps to production, so set the amounts you want in production before you ask.

Get Started

Set Up Project

Manage Sessions

Use Pregeneration

Sign from Server

Add Permissions

Add Advanced Features

Cap ETH per transaction and per day

Cap USDC per day

Cap SOL per day

Cap Stellar USDC per day

Publish your caps

​Cap ETH per transaction and per day

​Cap USDC per day

​Cap SOL per day

​Cap Stellar USDC per day

​Publish your caps

Cap ETH per transaction and per day

Cap USDC per day

Cap SOL per day

Cap Stellar USDC per day

Publish your caps